Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/1-pkoPKMCZ9qOJcUpbg4SD3YM82I.roa
File: 1-pkoPKMCZ9qOJcUpbg4SD3YM82I.roa (raw, json)
Hash identifier: fr0BGqmmgkymb/Io2tWlqm6/TRfrQYD5zH4bv2liAY4=
Subject key identifier: FA:99:28:3C:A3:02:67:DA:8E:25:C5:29:6E:0E:12:0F:76:0C:F3:62
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 019427B42C27EB40088E31B929629F4C910A
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/1-pkoPKMCZ9qOJcUpbg4SD3YM82I.roa
Signing time: Thu 02 Jan 2025 15:48:26 +0000
ROA not before: Thu 02 Jan 2025 15:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211614
IP address blocks: 84.15.125.0/24 maxlen: 24
84.15.126.0/24 maxlen: 24
84.15.127.0/24 maxlen: 24
213.252.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:2c:27:eb:40:08:8e:31:b9:29:62:9f:4c:91:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jan 2 15:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa99283ca30267da8e25c5296e0e120f760cf362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:26:23:24:1a:fa:35:c9:be:7d:32:02:01:
86:99:7a:22:da:d5:28:e7:ca:cc:b3:1b:c9:01:2c:
b9:38:62:82:52:0a:1d:5d:8c:c5:7a:09:e9:54:d6:
25:f1:e1:a3:0e:0f:d7:ef:36:dd:38:54:5c:24:50:
d0:4f:10:14:e6:0f:67:90:c2:08:07:e6:bd:87:88:
ae:47:ab:91:13:34:3f:bc:d3:fd:c2:9d:ca:33:4b:
8d:04:20:f7:7d:8f:db:06:fb:ea:e6:cd:48:9e:b0:
08:8d:36:d2:10:71:c9:37:1b:c6:33:b2:19:14:6e:
65:93:97:b6:57:29:af:36:e0:83:49:ad:75:0d:9a:
0f:89:de:06:a6:17:4b:05:b2:f5:7f:82:87:81:87:
70:af:e3:2b:9b:92:9e:aa:8a:48:2e:7f:3f:e9:ac:
6e:2f:10:01:5e:f0:fb:b3:9d:f9:b0:ad:aa:82:e6:
4a:cd:ec:90:d3:6f:e6:ad:28:dd:cd:8f:f5:c4:f5:
1f:cf:d0:34:da:aa:4b:e4:89:ac:03:dd:6f:c2:fc:
a4:a1:61:80:4e:0c:af:95:75:c8:3e:9a:7e:6e:ee:
cf:07:3b:b1:8b:ae:a1:ca:b4:62:c4:1c:66:08:ce:
ee:28:69:89:5e:24:1c:68:d7:e9:c5:6d:27:f8:b9:
5c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:99:28:3C:A3:02:67:DA:8E:25:C5:29:6E:0E:12:0F:76:0C:F3:62
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/1-pkoPKMCZ9qOJcUpbg4SD3YM82I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.15.125.0-84.15.127.255
213.252.243.0/24
Signature Algorithm: sha256WithRSAEncryption
36:91:cf:f3:61:d4:f2:9a:1f:f9:64:61:54:54:74:0e:29:37:
34:d5:5f:b0:7f:24:0a:b5:c9:e8:51:03:12:06:93:f2:64:ae:
6d:d6:f9:14:2b:ba:e6:29:76:19:ee:c8:58:c4:ec:b6:9e:d3:
49:c0:7c:ed:a9:af:0e:4a:51:e3:f9:93:d6:e5:9a:8a:69:24:
e2:62:3e:7f:e6:9f:5d:cb:dd:f3:0f:0d:18:bc:67:df:9a:b7:
cf:5b:05:e3:da:3b:fd:d0:0a:69:ba:cb:cb:23:37:b6:60:81:
1d:1c:67:99:f2:c5:49:5d:95:c7:75:c4:7b:7c:7f:e1:c8:51:
d6:24:a0:b4:6a:1e:21:bc:a9:3b:5b:4e:94:a1:a8:96:df:77:
fc:39:78:db:44:2d:e3:b3:37:d8:06:ab:a6:2e:c9:8c:9d:5f:
eb:0f:05:c5:3e:29:cf:8c:66:39:5e:85:93:f5:76:db:23:e4:
70:06:a2:52:e1:2b:4d:4f:0b:5f:fa:a3:17:f1:e9:f9:35:69:
aa:62:95:7c:1e:c2:ae:58:0f:8c:57:04:43:cb:9f:f5:8a:2e:
51:8e:f4:00:ee:c1:f8:06:4e:6f:4b:20:f9:eb:a4:da:86:60:
6a:ef:e0:65:3b:69:0d:52:24:6f:f3:8e:42:3d:00:4a:fc:47:
72:9c:fd:5d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQntCwn60AIjjG5KWKfTJEKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3
MTE4MGQwHhcNMjUwMTAyMTU0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTk5MjgzY2EzMDI2N2RhOGUyNWM1Mjk2ZTBlMTIwZjc2MGNmMzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7MmIyQa+jXJvn0yAgGGmXoi2tUo
58rMsxvJASy5OGKCUgodXYzFegnpVNYl8eGjDg/X7zbdOFRcJFDQTxAU5g9nkMII
B+a9h4iuR6uREzQ/vNP9wp3KM0uNBCD3fY/bBvvq5s1InrAIjTbSEHHJNxvGM7IZ
FG5lk5e2VymvNuCDSa11DZoPid4GphdLBbL1f4KHgYdwr+Mrm5KeqopILn8/6axu
LxABXvD7s535sK2qguZKzeyQ02/mrSjdzY/1xPUfz9A02qpL5ImsA91vwvykoWGA
TgyvlXXIPpp+bu7PBzuxi66hyrRixBxmCM7uKGmJXiQcaNfpxW0n+LlcUQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPqZKDyjAmfajiXFKW4OEg92DPNiMB8GA1UdIwQY
MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt
MDQ2ODA0MjQ4NmRjLzEvMS1wa29QS01DWjlxT0pjVXBiZzRTRDNZTTgySS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNmEvYThlYmU0LWQwYjMtNGU3ZC1hZjI1LTA0NjgwNDI0ODZk
Yy8xLzhOMkJxRFBac0VQSF85WTFwWmhfVTJseEdBMC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQAVA99
AwQHVA8AAwQA1fzzMA0GCSqGSIb3DQEBCwUAA4IBAQA2kc/zYdTymh/5ZGFUVHQO
KTc01V+wfyQKtcnoUQMSBpPyZK5t1vkUK7rmKXYZ7shYxOy2ntNJwHztqa8OSlHj
+ZPW5ZqKaSTiYj5/5p9dy93zDw0YvGffmrfPWwXj2jv90AppusvLIze2YIEdHGeZ
8sVJXZXHdcR7fH/hyFHWJKC0ah4hvKk7W06UoaiW33f8OXjbRC3jszfYBqumLsmM
nV/rDwXFPinPjGY5XoWT9XbbI+RwBqJS4StNTwtf+qMX8en5NWmqYpV8HsKuWA+M
VwRDy5/1ii5RjvQA7sH4Bk5vSyD566TahmBq7+BlO2kNUiRv845CPQBK/EdynP1d
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:23 2025 by rpki-client